Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa
File:                     34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa (raw, json)
Hash identifier:          eJwjGEqQ4mzBM81ikybDR84O8DATXTKoD+jUOLZo5xY=
Subject key identifier:   EA:D7:38:20:D2:7C:B2:C5:0A:D5:E5:A2:FB:AC:00:32:F9:64:2D:C7
Certificate issuer:       /CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
Certificate serial:       096F51F8B81859F05811827CD3FD0E02CA861409
Authority key identifier: 55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa
Signing time:             Tue 06 Oct 2026 13:09:44 +0000
ROA not before:           Tue 06 Oct 2026 13:04:44 +0000
ROA not after:            Tue 05 Oct 2027 13:09:44 +0000
asID:                     269245
IP address blocks:        45.182.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl
                          rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6f:51:f8:b8:18:59:f0:58:11:82:7c:d3:fd:0e:02:ca:86:14:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241
        Validity
            Not Before: Oct  6 13:04:44 2026 GMT
            Not After : Oct  5 13:09:44 2027 GMT
        Subject: CN=EAD73820D27CB2C50AD5E5A2FBAC0032F9642DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:06:a8:8a:3f:e6:19:eb:e1:97:48:b5:b6:
                    ca:0c:ec:01:08:e4:ac:e4:b7:29:38:a9:79:db:50:
                    d1:3c:e2:6e:9b:11:f7:3f:09:b7:17:3b:d7:ed:95:
                    eb:c0:d2:7d:1a:18:c5:2b:17:4f:b2:e7:b9:88:fc:
                    d4:5c:a7:62:65:24:d0:55:20:65:6e:ae:e9:a1:49:
                    88:f0:44:93:b2:aa:63:bd:06:2f:b5:ad:3e:95:06:
                    18:06:ac:18:66:aa:ab:02:de:a7:0d:bb:5e:cb:9f:
                    9d:59:fb:ba:d2:06:ff:cd:0a:9e:6a:5d:da:d2:e4:
                    6e:25:94:27:ce:62:49:98:fb:91:81:87:ea:86:d1:
                    fb:f6:6f:9f:68:e6:bf:35:ce:49:62:7b:46:d5:66:
                    3f:33:75:37:c7:e7:09:1c:8b:08:e3:f4:0f:6d:9e:
                    a2:14:13:1b:19:03:8c:95:aa:16:72:c8:3d:95:aa:
                    51:10:13:50:bb:d5:67:36:4e:d9:6a:75:9f:38:1a:
                    c4:72:65:06:4c:a2:15:97:9c:e9:5a:f8:a5:81:9b:
                    03:ce:db:98:33:82:c3:9f:a7:44:0c:53:16:9b:60:
                    8c:c2:09:8e:d6:10:ae:e9:ff:73:75:9a:0a:2d:1b:
                    4c:f0:ae:13:49:5a:f6:08:3f:72:ce:4d:02:1d:ae:
                    b6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:38:20:D2:7C:B2:C5:0A:D5:E5:A2:FB:AC:00:32:F9:64:2D:C7
            X509v3 Authority Key Identifier:
                keyid:55:6E:63:1D:A1:03:9E:6B:9A:8A:0A:7E:A8:93:8A:2B:1C:F3:E2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/556E631DA1039E6B9A8A0A7EA8938A2B1CF3E241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZheBqFxFznL1qfAebYUAYv3mi4VVMQ8nw7tsJCDJJmZ/0/34352e3138322e3235302e302f32332d3233203d3e20323639323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:33:ee:72:0f:1f:de:e6:82:89:0a:79:30:16:c4:30:b7:09:
         b7:cd:d7:38:7b:21:c2:22:b5:82:5b:78:a3:77:20:62:e0:f4:
         6f:95:d2:15:8a:24:20:33:4c:09:5b:77:56:19:d9:34:2c:c5:
         37:02:db:17:05:58:e1:c4:4e:16:f3:01:df:52:55:ad:b2:8c:
         69:74:20:d5:a0:1e:95:d9:b2:67:2e:f7:b2:0b:45:40:16:49:
         cd:6c:14:f7:f0:c0:28:48:2f:1b:c7:12:b7:36:2e:26:f4:b8:
         f5:c1:37:ee:54:86:43:06:4c:d5:29:44:74:f9:17:3a:07:99:
         a3:01:c2:c5:e0:08:0c:2a:55:bd:25:f4:64:81:7d:58:b2:b7:
         76:06:ea:10:77:9c:b3:1b:cd:b4:0a:74:9a:b3:c4:ae:0b:7d:
         f4:b0:24:d8:6b:af:53:7b:6c:51:91:b0:92:97:e2:50:54:16:
         40:ee:a4:88:fc:56:33:ed:1d:c2:8c:c8:cf:f5:4a:e5:01:0b:
         37:0a:58:5d:c9:73:b2:4a:d4:75:56:2b:a3:66:e6:1b:98:cf:
         04:f5:c5:12:73:8e:cd:12:94:20:50:98:a0:78:fd:e4:38:7f:
         ad:d0:21:cb:a6:86:53:98:20:40:d2:9b:e2:b8:e8:02:4f:74:
         18:69:09:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:58:11 2026 by rpki-client